A critical remote code execution vulnerability exists in Google Chrome for iOS, posing a severe risk to device integrity.

This vulnerability involves improper input validation within the Transactions Platform, which can be triggered by an unauthenticated remote attacker via a crafted HTML page. Successful exploitation allows for code execution outside the security boundaries of the browser sandbox.

The ability to achieve arbitrary code execution outside the sandbox environment represents a total loss of confidentiality, integrity, and availability for the affected device. With a CVSS score of 9.6, this flaw is critical, as it provides an attacker with a pathway to bypass primary browser security controls and potentially compromise sensitive user data or system files.

Immediate Action: Update Google Chrome on all iOS devices to version 152.0.7977.82 or later immediately to apply the vendor-supplied patch.

Proactive Monitoring: Review device management logs for unexpected application crashes or unusual network traffic patterns originating from the browser environment.

Compensating Controls: While specific browser-based controls are limited, ensure that mobile device management policies are enforced to restrict unauthorized application installations and enable automatic updates.

Public Exploit Available: No

Given the critical CVSS severity score of 9.6, this vulnerability warrants immediate attention. Organizations and individual users should prioritize updating Google Chrome on all iOS platforms to the latest stable version to prevent potential remote exploitation.